Trellix takes security log parsing from days to minutes with a LangGraph agent
Security vendor Trellix built an agent that, per LangChain, cuts log parsing time from days to minutes — a concrete win in a domain where analyst hours are expensive and slow triage has real cost. Built on LangGraph for the orchestration and LangSmith for observability.
Security operations is one of the stickiest real use cases for agents because the work is high-volume, pattern-heavy and bottlenecked on scarce analyst time — exactly what an agent absorbs well. Trellix’s days-to-minutes result (LangChain-reported) is on log parsing, the tedious front end of incident work. The stack split is worth noting for anyone building: LangGraph handles the stateful orchestration (so steps are auditable and rerunnable) while LangSmith covers tracing/eval — the same build-path pairing showing up across these outcome-backed cases.